We deliver science, technology and engineering solutions to governments and companies around the world.
Cybersecurity Risk Management Framework Information System Security Officer
Location
United States
Posted
44 days ago
Salary
$107.6K - $161.4K / year
Seniority
Mid Level
No structured requirement data.
Job Description
Cybersecurity Risk Management Framework Information System Security Officer
KBR, Inc.
Role Description KBR is seeking a Cybersecurity Risk Management Framework (RMF) Information System Security Officer (ISSO) to support the DHA Solution Delivery Division (SDD). In this role, you will lead Assessment & Authorization (A&A) activities and guide systems through the RMF lifecycle to achieve and maintain Authorizations to Operate (ATOs) for mission-critical medical systems. You will work closely with engineers, developers, and government stakeholders to ensure compliance with NIST, DoD, and DHA cybersecurity requirements while supporting continuous monitoring and risk management efforts. This 100% remote position requires availability during standard Eastern Time (ET) day shift hours. Join KBR to contribute directly to protecting critical healthcare systems supporting warfighters and their families. - Manage one or more information systems throughout the full six-step RMF lifecycle, including assessment, authorization, and continuous monitoring activities - Serve as an RMF Subject Matter Expert (SME), advising stakeholders on cybersecurity compliance, risk posture, and ATO readiness - Develop, review, and maintain RMF packages and associated documentation, including Security Plans, POA&Ms, Risk Assessment Reports, and security control policies - Assess system compliance against NIST SP 800-53 controls and DHA RMF requirements as part of self-assessment and annual reviews - Document and maintain evidence supporting control implementation and compliance - Lead and participate in A&A and stakeholder meetings to track system status, resolve issues, and drive RMF progress - Coordinate with engineers and system owners to develop architecture diagrams, system asset inventories, and security policies - Prepare and deliver status reports to DHA leadership on system authorization and compliance efforts Qualifications - Active DoD Secret security clearance - Bachelor’s degree in cybersecurity, information technology, or related field with 6+ years of experience; or 14+ years of relevant cybersecurity/IT experience in lieu of degree. - DoD Manual 8140.03 (formerly 8570.01)-compliant certification (e.g., Security+, CISSP, CASP+/SecurityX) - Demonstrated experience performing RMF activities as an ISSO/ISSM/SME, including ATO process support and RMF package development (Security Plans, POA&Ms, architecture diagrams, system security policies, etc.) - Demonstrated experience assessing and documenting NIST SP 800-53 controls - Experience using Microsoft Office applications: Word, PowerPoint, Excel, and SharePoint Requirements - Experience using eMASS or equivalent compliance-tracking application - Experience supporting RMF processes under DHA - Familiarity with ACAS and DISA STIGs/SRGs and tools such as STIG Viewer and SCAP Compliance Checker - Familiarity with Continuous Monitoring and Risk Scoring (CMRS) - Experience using Microsoft Project to build Integrated Master Schedules (IMS) Compensation $107,600.00 - $161,400.00. The salary range posted is based on the national average. The offered rate will be based on the contract affordability and the selected candidate’s location, knowledge, skills, abilities, and/or experience, and in consideration of internal parity. Benefits - KBR offers a selection of competitive lifestyle benefits which could include a 401K plan with company match - Medical, dental, vision, life insurance, AD&D - Flexible spending account, disability, paid time off, or flexible work schedule - Support for career advancement through professional training and development
Related Guides
Related Categories
Related Job Pages
More Risk Jobs
Treasury Capital Management
CapcoCapco, a Wipro company, is a management & technology consultancy dedicated to the financial services & energy industries
Job Title: – Treasury Capital Management About Us “Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery. WHY JOIN CAPCO? You will work on engaging projects with the largest international and local banks, insurance companies, payment service providers and other key players in the industry. The projects that will transform the financial services industry. MAKE AN IMPACT Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services. #BEYOURSELFATWORK Capco has a tolerant, open culture that values diversity, inclusivity, and creativity. CAREER ADVANCEMENT With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands. DIVERSITY & INCLUSION We believe that diversity of people and perspective gives us a competitive advantage. Job Description: - Design and implement the operating capability to support semi-annual dividend payments including production of a clear cost/benefit assessment - Streamline Capital Issuance TAP (Transaction Approval Process) processes end-to-end - Develop and maintain a Capital raising plan (governance, roles, timelines, approvals, documentation standards) - Create a concise reference pack summarizing constituents of capital and how they move over time - Deliver business-as-usual activities to a consistently high standard (accuracy, timeliness, and control discipline)
Risk Manager - Country and Operational Risk
CoinbaseWe're building an open financial system for the world.
Risk Manager - Country & Operational Risk Remote - UK Ready to be pushed beyond what you think you’re capable of? At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform — and with it, the future global financial system. To achieve our mission, we’re seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company’s hardest problems. Our work culture is intense and isn’t for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there’s no better place to be. While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported. CB Payments, Ltd (CBPL) is Coinbase’s UK‑incorporated electronic money institution, authorised and supervised by the FCA and registered as a cryptoasset exchange and custodian wallet provider, enabling customers to move between fiat and crypto and access Coinbase’s UK platform. This dual‑hatted role serves both as CBPL’s 2LoD Country Risk Manager and as a Risk Manager within Global Operational Risk Management (ORM), running the local risk framework for the UK entity and contributing to Coinbase’s enterprise‑wide operational risk programs so that risks remain within appetite while the UK business grows safely. What you'll be doing: CBPL Country Risk (entity 2LoD) - Run CBPL’s entity‑level risk framework in line with CBPL Risk Policy, Methodology and Appetite, covering financial, operational, technology, outsourcing, conduct and regulatory risks. - Lead and challenge RCSAs, incident/issue management, KRIs/KCIs and risk‑appetite monitoring for CBPL, including MiFID‑related change as the licence is pursued. - Provide 2LoD risk challenge on products, change initiatives and governance, and prepare clear, decision‑useful risk MI for the CBPL Risk Committee, Board and key working groups. - Oversee CBPL’s outsourcing and intra‑group risk (GSAs/SLAs, exit plans, third‑party concentration, resilience) and support operational resilience work on important business services. - Support CBPL’s ICARA, prudential planning and regulatory engagement with country‑level risk input, scenarios and remediation tracking. Operational Risk Manager, Global ORM (group role) - Help design, enhance and embed Coinbase’s global Operational Risk Management framework (RCSA, incident and loss data, key controls, KRIs, scenario analysis, business resiliency). - Own or co‑own one or more global ORM program areas (e.g. incident management, non‑financial risk assessment, resilience, third‑party risk, loss analytics), coordinating virtual squads across entities. - Act as a trusted 2LoD partner to global product and operations teams, reviewing new products and change for operational‑risk impacts with a particular focus on items affecting CBPL and the UK footprint. - Enhance operational‑risk MI and dashboards for senior management and Board‑level forums, bringing CBPL insight into the enterprise view of operational risk. Leadership & culture - Champion a strong risk culture across CBPL and Global ORM, clarifying 1LoD/2LoD roles, encouraging early escalation and embedding UK regulatory expectations in everyday decisions. - Coach first‑line and functional leaders on prudential, operational, outsourcing and conduct risk in a simple, practical way. - Role‑model Coinbase culture and leadership principles, including clear written and verbal communication, ownership mindset and bias for action. What we look for in you (ie. job requirements): - Demonstrates the ability to responsibly use generative AI tools and copilots (e.g., LibreChat, Gemini, Glean) in daily workflows, continuously learn as tools evolve, and apply human‑in‑the‑loop practices to deliver business‑ready outputs and drive measurable improvements in efficiency, cost, and quality. Experience & technical skills - 7–10+ years of risk‑management experience in UK‑regulated financial services, with strong exposure to operational and enterprise risk. - Deep understanding of core risk‑management and operational‑risk concepts, including risk governance, three lines of defence, RCSA, incidents/issues, KRIs/KCIs, risk appetite and stress testing. - Practical experience engaging with UK regulation (e.g. SYSC, MiFIDPRU/IFPR, operational resilience, outsourcing, conduct and Consumer Duty) and applying it to risk frameworks. - Prior experience working in or closely with 2LoD functions, engaging Boards, senior management, regulators and internal audit. Ways of working - Demonstrated ability to design and implement risk processes and procedures for effective risk management at both entity and group level. - Strong organisation, project and time‑management skills; able to manage multiple workstreams, prioritise effectively and deliver high‑quality output under tight deadlines. - Proven track record of building effective relationships with business partners, peers and senior leaders across global, matrixed organisations. - Comfortable operating in a fast‑paced, high‑growth, technology‑led environment with changing priorities. Mindset and culture add - Positive energy and optimism about the future of technology and finance, with deep curiosity about prudential, conduct and operational risk and how crypto intersects with traditional markets. - Appreciates direct communication and candid feedback and uses both to continuously improve; can pivot quickly between priorities with a “can‑do”, end‑to‑end ownership mindset. - Wants to be part of a high‑performing, remote‑first team and is comfortable being pushed out of their comfort zone. Nice to haves: - Hands‑on experience with risk governance tooling (e.g. RSA Archer or similar GRC platforms) and building risk MI and dashboards. - Prior exposure to crypto, digital assets or other innovative financial‑technology businesses. - Relevant qualifications in risk management, operational risk, MiFID/IFPR or internal audit (e.g. IRM, FRM, PRM, CFA or equivalent). Position ID: P76566 #LI-Remote Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision). Annual base salary range (excluding equity and bonus): £95,490 - £106,100 GBP Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Data Governance Specialist – Microsoft Purview, Sensitivity Labels
Genesis Digital SolutionsTransforming businesses through cutting-edge digital innovation and unparalleled IT consulting services.
• Designing and maintaining information classification frameworks aligned with Copilot requirements • Implementing and managing classification taxonomies using Microsoft Purview • Configuring and optimizing Sensitivity Labels to control data access and Copilot usage • Developing and maintaining automated data classification and labeling policies • Defining and managing Data Loss Prevention (DLP) policies to protect sensitive and regulated data • Monitoring governance controls and ensuring audit readiness through Purview Audit Logs and eDiscovery • Collaborating with IT Security, Compliance, Legal, and business stakeholders to align governance strategies • Supporting continuous improvement of data protection and information governance practices
Ready to be pushed beyond what you think you’re capable of? At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform — and with it, the future global financial system. To achieve our mission, we’re seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company’s hardest problems. Our work culture is intense and isn’t for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there’s no better place to be. While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported. As a Pull Payments Analyst on the Payments Risk Analytics team, you’ll be fully responsible for identifying and mitigating payments risk on one of our critical payment rails without negatively impacting core metrics and the broader customer experience. What you’ll be doing: - Identify, investigate and mitigate fraudulent deposit activity. - Implement logic targeting bad actors and high-risk behavior associated with unauthorized deposit activity across multiple regions. - Use data to assess risk and make decisions impacting large segments of our customer population; effectively measure and assess associated tradeoffs using quantitative analysis. - Synthesize data learnings into compelling stories and communicate them to Payments Risk leadership. - Review and respond to alerts regarding anomalous customer and transaction behavior. - Measure fraud performance across payment methods, develop core metrics, and create dashboards to track and understand them. - Proactively identify and close gaps in our monitoring. - Own risk controls from end-to-end and scale processes to provide appropriate coverage as we expand our business. - Own reporting processes and communication with relevant banking partners. - Work with internal stakeholders in Product, Growth, Data Science and Engineering to develop and drive forward custom risk management strategies and techniques for different geographies. What we look for in you: - 4+ years relevant experience - 2+ years fighting push payment fraud in an e-commerce or financial services environment - 2+ years of experience in data analysis, working with databases, and querying (e.g., SQL, MySQL, etc). - BA / BS degree or equivalent practical experience - Strong knowledge of pull payment processes and experience with fraud claim investigations - A passion for fighting fraud and abuse, and the curiosity to self-drive investigations, identify patterns, and conduct root cause analysis - Experience in data analyses using SQL and Databricks. - Experience with data visualization and storytelling using Looker, Tableau, SuperSet or other business intelligence platforms - Be able to independently create plans for analytics projects and build collaboration within the team - Demonstrate our core cultural values: clear communication, positive energy, continuous learning, and efficient execution - Demonstrates the ability to responsibly use generative AI tools and copilots (e.g., LibreChat, Gemini, Glean) in daily workflows, continuously learn as tools evolve, and apply human-in-the-loop practices to deliver business-ready outputs and drive measurable improvements in efficiency, cost, and quality. Nice to haves: - Understanding of statistical concepts and experience in applying them - Experience working with quantitative tools such as Python or R - Experience working with machine learning models - An understanding of blockchain analytics and/or fraud trends within the cryptocurrency ecosystem Job #: (P76665) #LI-Remote Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision). Annual base salary range (excluding equity and bonus): £85,320—£94,800 GBP Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying. Commitment to Equal OpportunityCoinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the Employee Rights and the Know Your Rights notices by clicking on their corresponding links. Additionally, Coinbase participates in the E-Verify program in certain locations, as required by law. Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations[at]coinbase.com to let us know the nature of your request and your contact information. For quick access to screen reading technology compatible with this site click here to download a free compatible screen reader (free step by step tutorial can be found here). Global Data Privacy Notice for Job Candidates and ApplicantsDepending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required. For US applicants only, by submitting your application you are agreeing to arbitration of disputes as outlined here. AI DisclosureFor select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description. For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate. The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com



